Questions tagged [malware]

Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

Filter by
Sorted by
Tagged with
1 vote
3 answers
86 views

Can my phone got infected if visit my mail inbox without opening any mail attachments?

I've found some articles saying some viruses/malware can attack your device by just opening an email without downloading or opening any attachments. Is this true? If yes, how risky for ordinary mail ...
Sasi Bulan's user avatar
0 votes
1 answer
55 views

Why Ransomware generate keypair in victim?

I read this answer Ransomware encryption keys and understood how wannacry works. But I still have a question: as I understand, the hacker will put the hacker's RSA public key in the malware, the ...
Thanh's user avatar
  • 1
0 votes
2 answers
70 views

Clean wipe of USB stick of any hidden codes

If I purchase a supposedly brand new USB stick (or micros SD, or similar portable storage devices) online, and I don't quite know the origin where they are produced, and I am a bit paranoid, is there ...
Tristan Tran's user avatar
5 votes
1 answer
306 views

Why did the xz-tools attacker put so much effort into hiding the malware when they could manipulate the tarball?

With all the discussion about the xz-tools supply chain attack on the Linux distros, what confuses me: As stated here or on the infographic here, the attackers worked their way to becoming trusted ...
Niclas's user avatar
  • 153
0 votes
0 answers
38 views

Can my VPN hide my IP address so I can test malware? [duplicate]

I heard that VPN could mask your IP address, but is this perfectly secure? I am trying to open up what I suspect to be malware on a VM, and I obviously don’t want it to be sending my real IP address ...
chen's user avatar
  • 1
0 votes
0 answers
14 views

How to fix Secure Boot error "Image failed to verify with *ACCESS DENIED*"(possible firmware rootkit) [migrated]

When attempting to boot a live OS via USB or CD, I get the secure boot error: "Image failed to verify with ACCESS DENIED". There is no SSD/HDD installed. Secure boot is enabled and while i ...
Ramzialzaki Weir's user avatar
11 votes
1 answer
410 views

XZ compromise and consequences for people having used it

Here's a hot topic: https://www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users https://lwn.net/Articles/967180/ https://lwn.net/ml/oss-security/20240329155126.kjjfduxw2yrlxgzm@...
Artem S. Tashkinov's user avatar
0 votes
0 answers
76 views

Malware in a PDF

I opened a PDF yesterday. How large would a PDF be that has malware? The one I downloaded was approximately 5 MB. If I opened the PDF on a browser, would the browser be infected? For some context: I ...
EDE's user avatar
  • 1
1 vote
1 answer
108 views

Does PDF level compression implicitly cleans file of malware?

Recently I've been looking into PDF files security, specifically about malware exploiting vulnerabilities in PDF readers. I thought about one thing - does compressing PDF file (for example, by using ...
Madzik's user avatar
  • 13
0 votes
0 answers
24 views

Is my home network infected? [duplicate]

Today, my family brought me a quite old laptop (it had Windows 7 Enterprise from around 2009). When I tried to turn it on, it was already complicated because I got a black screen with options, but the ...
Marth's user avatar
  • 1
0 votes
1 answer
88 views

Can an Azure template contain a virus, a backdoor or malware?

Sometimes you can find projects on the internet that can propose you to import a template to Azure, like this one. You have a button and if you click it allows you to deploy: Then you go through the ...
Francesco Mantovani's user avatar
0 votes
1 answer
67 views

How dangerous is this suspicious PHP code? [closed]

I found this code on my web server in /wp-content/uploads/2023/index.php: $hello_dolly[]='b8f878fc41d0fd3c'; $hello_dolly[]=$_POST; $hello_dolly[]='color'; if (isset($hello_dolly[1][$hello_dolly[0]])) ...
mwfearnley's user avatar
0 votes
0 answers
68 views

If you encrypt an entire USB with Veracrypt can malware be put on the USB while encrypted?

Let's say that you take a USB drive and encrypt the entire thing with Veracrypt. Could someone modify that USB drive to include malware on it? This is not assuming that physical changes to the device ...
Rideboards's user avatar
0 votes
1 answer
107 views

How to check whether a printer driver is malicious or not

While downloading a printer driver from the company's website, redirected to a google drive link. Google warning says it could be malicious. The company is MEPL- based in India, but it is using a ...
Kunal Gurbani's user avatar
0 votes
0 answers
85 views

Is it possible to infect a monitor via HDMI plus Ethernet [duplicate]

I caught a virus because of an exe file I downloaded to my computer last week. I am replacing my modem, graphics card, motherboard, processor, ssd and ram components with new ones. What are the ...
Christmas's user avatar
0 votes
0 answers
75 views

Possible to supply IKEA Tradfri with Malware? (How to detect / remove)

Maybe I'm overly cautious here, but I bought a 2nd hand IKEA Tradfri lightbulb. The package was opened so whoever owned it before had access to the bulb itself. My question is: Am I too cautious ...
Xenonite's user avatar
1 vote
0 answers
52 views

Streamer Virus on offline network [closed]

I have an offline network with 200 users. and routers, switches, 4 esxi servers and 1 netapp rack. After about a year, my team found out that we have a virus in the network called streamer.exe that ...
Eyalby's user avatar
  • 11
0 votes
1 answer
154 views

Is malware less prevalent in the Apple App Store compared to the Google Play Store?

I was searching for reports about malware on the Apple App Store and only found minor ones (at least from a user's perspective) on the first few Google search results. Doing the same search for the ...
Martin Thoma's user avatar
  • 3,932
1 vote
0 answers
50 views

WinAPI legit usecase for setting PPID

I am studying malware development right now (exclusively WinAPI) and reached the topic of PPID spoofing. I understand the concept and why it is useful, however I do not understand why is it possible ...
B4D4M's user avatar
  • 11
0 votes
0 answers
84 views

Very frequent calls to same Windows API function by malware

Here I have a malware sample that calls RegQueryValueEx quite frequently, without any time interruption. And as we can see, the result is quite often "BUFFER OVERFLOW". In another topic I ...
Questions123's user avatar
0 votes
1 answer
148 views

Can double-clicking an infected .xlsx file infect me if it crashed?

I downloaded an Excel (.xlsx) file from the internet. Then I tried to open it by double-clicking on it. But it suddenly crashed. Could this mean it could've contained a virus or malware?
Elon Musk's user avatar
0 votes
3 answers
95 views

Network knowledge in malware analysis

I asked an experienced person about the needs of malware analysis. He told me: "Learn x86, C/C++, Win32 API, Windows internals, PE file structure basics... Then when you are comfortable with ...
Moha Mohai's user avatar
0 votes
1 answer
124 views

Is an antivirus needed for linux home usage when there is exchange of files with other OS e.g. Windows?

I was under the impression that an antivirus for Linux makes sense only for installing in business computers. Checking Norton/BitDefender/Karpesky I don't see any Linux option for the first or any non ...
Jim's user avatar
  • 183
0 votes
1 answer
130 views

How are virus or exploits tested without being detected?

I was wondering how threat actors actually test their exploits without them being automatically detected and added to the library of an antivirus detection system, thereby being marked as useless and ...
birdd's user avatar
  • 41
0 votes
0 answers
69 views

What types of attacks can MFA using an hardware authenticator prevent?

I recently looked into the topic of MFA in combination with some hardware authenticator (USB keys like Nitrokey/Yubico) to potentially improve the overall security of my digital daily activities (web ...
Stephan's user avatar
0 votes
1 answer
113 views

How does malware work when compressed?

I have read up on compressed folders of file types such as .zip, .rar and .7zip being the malicious file itself (excluding cases such as an .exe file being disguised as a .zip file etc...), only ...
ReaLiTy-UnFatHom's user avatar
0 votes
1 answer
148 views

ScyllaHide DLL Injection

When I try to perform a DLL injection with ScyllaHide in x32/x64 dbg, then it crashes for some reason, is this a bug? Both with stealthy injection as with normal injection, the program crashes when I ...
Moooz's user avatar
  • 35
0 votes
0 answers
25 views

microsoft bitlocker copy data in background [duplicate]

I use microsoft bitlocker encryption all my disks. Some day, maybe I click on a phishing email and my computer be hacked. Hacker sends my data to his server. Is the data encrypted or plaintext in his ...
bigdata's user avatar
1 vote
0 answers
100 views

Suspicious new folders with chaotic jpg,sql,doc,txt and doc files

I found several new folders, each containing 10 small files with random content ( a chaotic picture, an rtf of random letters, a corrupted doc file etc...), all the files were created at the same time,...
OMGsh's user avatar
  • 111
0 votes
1 answer
216 views

How to determine which Chrome extension is re-directing me to ad sites

Twice now, seemingly randomly, I've been redirected to an ad site. I believe it has occurred both times when I have a new tab open, type what I'm searching for (Google is my default search engine), ...
johnfernow's user avatar
0 votes
1 answer
104 views

How many parts of an average laptop can be compromised? and how to confirm they are not?

The majority of virus/malware is stored and persists on the hard drive, Therefore by formatting the hard drive or re-installing the operating system, the virus is removed. However, the average laptop ...
Marshall's user avatar
2 votes
1 answer
98 views

How to detect a malware which is fragmented across multiple packets

How can we detect a malware which is fragmented across many packets , do we have to do some prefix /suffix matching kind of approach? Does tools like snort,Suricata support this ?
Chits's user avatar
  • 105
1 vote
1 answer
135 views

Can malware detect memory dumping?

Morning, I recently had need to check for malware on my PC by dumping the memory and searching for unwanted processes which could be malware, my question it's, is it possibile for malware to detect ...
Hopkins's user avatar
  • 13
1 vote
1 answer
148 views

Does Python in Excel have the same Security issues as VBS in Excel?

Microsoft Excel supports Python scripts (source). VBScript Macros within Excel are known to be a security risk (source). If I read this emotet article right, then VBScript macros allow arbitrary code ...
Martin Thoma's user avatar
  • 3,932
1 vote
1 answer
689 views

Can malware be contained in an image sent via WhatsApp?

I went online with a new WhatsApp account earlier (with a new number), and the first thing that happened was that I received a threatening message from a number with an ISD commonly used by scammers ...
Southfar's user avatar
2 votes
0 answers
229 views

WordPress site hacked [closed]

We got hacked. Our setup: DigitalOcean VPS, Apache, multiple domains & WP websites, Elementor Pro, hopefully safe plugins. Known facts: It's phishing. The virus infects all the websites on our ...
Ni Amon's user avatar
  • 29
1 vote
0 answers
103 views

Can a file contain a virus that an antivirus cannot detect? [duplicate]

Suppose that I have an external storage (such as a USB memory stick or an SD card) which contains some files (such as documents or images). Suppose that I am running an antivirus which scans drives ...
Ender Wiggins's user avatar
0 votes
0 answers
40 views

Can you be tracked while using a vpn? [duplicate]

Can you be tracked even with a vpn? If a sophisticated eithical hacker really wanted you will a vpn save you?
Anon Anon's user avatar
1 vote
0 answers
102 views

I clicked on a suspect link, whose base url was live (dot) tvstreaming4k (dot) com, during a live event. Is this a threat? [duplicate]

Edit: It has been observed that my question may already have an answer here How to check whether a link is safe or not? [closed] and here How do I safely inspect a potentially malicious website?. Even ...
Ender Wiggins's user avatar
0 votes
0 answers
210 views

Secure boot disabled for Potential BIOS compromise on Tails OS machine

I have an ASUS computer that I use strictly for booting Tails OS from a USB. A few weeks ago I went into the BIOS and noticed that secure boot was disabled. This computer has secure boot enabled by ...
blacksangria's user avatar
2 votes
1 answer
126 views

Anything I can do to combat malicious domains?

On Facebook, malware is currently trying to spread itself using the domain googlediver (dot) com, one sample of a malicious url is https://googlediver (dot) com/list-of-traveling-staff , and I believe ...
user1067003's user avatar
1 vote
1 answer
145 views

How serious are npm module vulnerabilities?

Obviously any known vulnerabilities are not great, but I'm curious how much I should be concerned about them. I've seen plenty of articles that talk about the rise in malware/spam in npm packages: ...
fyrekcaz's user avatar
0 votes
0 answers
172 views

Use a virtual machine to do risky stuff. How to stay as safe as possible? [duplicate]

I have a PC with Ubuntu and Windows in dual boot. I use this PC for basic stuff: Windows for gaming, shopping and common browsing, Ubuntu to do something such as home banking. I was thinking to create ...
koxige9113's user avatar
0 votes
0 answers
109 views

How to Safely Research a Suspected Malicious Website by Using A VM [duplicate]

I am aware of a website that I suspect is, at the very least, pulling user data from visitors and possibly performing other malicious activity on visitors. Of course, the safest course of action is to ...
Evan Leahy's user avatar
2 votes
1 answer
402 views

In the modern context, what max harm can a webpage do, if the creator is malignant? [duplicate]

Note: this does not answer my question as it mentions Java/Flash(not in the modern context. The question is from like 10 years ago so probably outdated), and mentions weakness introduced by the user(...
Nicholas's user avatar
  • 131
1 vote
0 answers
149 views

Detecting hard to detect stalkerware - a theoretical question

Suppose you have a stalker and this person has access to professional advice. Suppose your Android phone was hacked by means of physical access, i.e. known unlock pattern or stolen password note, with ...
LiamNiam's user avatar
4 votes
1 answer
238 views

Suspicious indexing of non-existent pages

Just recently, the Google search engine started indexing my site with a crazy number of requests. When I logged into the console, 600,000 pages were indexed, and 919,000 more were not indexed. For ...
Володька's user avatar
0 votes
1 answer
111 views

Cleansing a personal laptop to use for business

I am going to be setting up an online business that will expose high-value data, i.e. trade secrets, IP, merchant/e-commerce accounts, etc. The computer has been used before for looking at porn, etc. ...
eskimocougar's user avatar
0 votes
0 answers
124 views

How can I know whether I'm infected by StripedFly malware?

I was reading this article, and decided to search for sd-pam in the processes of one of my laptops. I did ps -x | grep -i "sd-pam", and got 2864 ? S 0:00 (sd-pam) 29172 pts/0 ...
An old man in the sea.'s user avatar
0 votes
0 answers
96 views

help in understanding hybrid analysis results? Mac

So I have a few PDFs on my computer I got online a few years ago on my Mac computer. When I ran a virus total scan on some of them I got a couple that were concerning. Here is the one that most ...
DELL_GONEEE's user avatar

1
2 3 4 5
51